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CLAIMS 



1. (Currently Amended) A method of capturing communication associated 
information (CAI) of a communication between a subject and an associate, the method 

•o 

comprising the steps of: 

intercepting the communication, the communication comprising at least one packet and 
each packet comprising CAI; 

providing an appHcation identifier (AID) in the at least one packet of the communication, 
the AID identifying the format of the CA L wherein the AID is located in the optional field of 
Network Layer 3 : 

extracting in accordance with the AID the CAI from the at least one packet for reporting; 

determining whether the extracted CAI is a new instance of the CAI; 

reporting a first message to a Law Enforcement Agency (LEA) in response to a 
determination that the extracted CAI is the new instance of the CAI; 

determining whether a predetermined amount of time has elapsed between packets of the 
at least one packet of the communication, the packets being identified by the CAI; and 

reporting a second message to an LEA in response to a determination that the given 
amount of time has elapsed, wherein the second message represents a timeout indication. 

2. (Cancelled) 

3. (Previously Presented) The method of Claim 1 2, wherein the second message 
comprises at least one of a subject identifier, a time stamp indicating when the message was sent, 
the IP address of the subject, a packet direction indicator identifying whether the message was 
sent or received by the subject, the IP address of the associate, a first instance indicator 
identifying the new instance of the CAI, and a counter indicating the number of packets 
identified by the CAI seen since a last message. 

4. (Original) The method of Claim 1, wherein the method further comprises the 
steps of: 
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determining whether a given number of packets of the at least one packet of the 
communication has been intercepted, the packets being identified by the CAI; and 

reporting a third message in response to a determination that the given number of packets 
identified by the CAI has been intercepted. 

5. (Original) The method of Claim 4, wherein the third message comprises at least 
one of a subject identifier, a time stamp indicating when the message was sent, the IP address of 
the subject, a packet direction indicator identifying whether the message was sent or received by 
the subject, the IP address of the associate, a first instance indicator identifying the new instance 
of the CAI, and a counter indicating the number of packets identified by the CAI seen since a last 
message. 

6-8. (Cancelled) 

9. (Original) The method of Claim 1, wherein the method further comprises the step 

of 

providing an AID-tag in the at least one packet of the communication, the AID-tag 
indicating the presence of the AID. 

10. (Original) The method of Claim 1, wherein the method further comprises the 
steps of 

providing an AID-tag in the at least one packet of the communication, wherein the AID- 
tag indicates the presence of the AID, and wherein the AID-tag is located in the protocol field of 
the Network Layer 3. 

11. (Original) The method of Claim 1, wherein the first message comprises at least 
one of a subject identifier, a time stamp indicating when the message was sent, the IP address of 
the subject, a packet direction indicator identifying whether the message was sent or received by 
the subject, the IP address of the associate, a first instance indicator identifying the new instance 
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of the CAI, and a counter indicating the number of packets identified by the CAI seen since a last 
message. 

12. (Currently Amended) A method of consolidating at least one packet of a 
communication between a subject and an associate, the method comprising the steps of: 

receiving at least one packet of the communication, each packet comprising 
communication associated information (CAI); 

providing an application identifier (AID) in the at least one packet of the communication, 
the AID identifying the format of the CAL wherein the AID is located in the optional field of 
Network Layer 3: 

extracting in accordance with the AID the CAI from the at least one packet for reporting: 
determining whether a packet is a new instance of the CAI 

reporting the CAI in response to a determination that the packet is a new instance of the 
CAI to an LEA; 

determining whether a predetermined amount of time has elapsed between packets of the 
at least one packet; 

reporting a timeout indication to an LEA in response to a determination that the 
predetermined amount of time has elapsed; and 

reporting the CAI periodically to an LEA in response to a determination that the packet is 
a subsequent packet. 

13. (Original) The method of Claim 12, wherein the step of determining whether a 
packet is a new instance of the CAI is performed by comparing the CAI with a previous CAI. 

14. (Original) The method of Claim 12, wherein the step of determining whether a 
packet is a new instance CAI is performed by allowing a given amount of time to elapse since 
the receipt of the at least one packet. 
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15. (Original) The method of Claim 12, wherein the CAI report comprises at least one 
of a subject identifier, a time stamp indicating when the message was sent, the IP address of the 
subject, a packet direction indicator identifying whether the message was sent or received by the 
subject, an associate identifier, a first instance indicator identifying the new instance of the CAI, 
and a counter indicating the number of packets identified by the CAI seen since a last report. 

16-22. (Cancelled) 

23. (Currently Amended) An apparatus for providing access to communication 
associated information (CAI) of a communication between a subject and an associate, the 
apparatus comprising: 

means for intercepting the communication, the communication comprising at least one 
packet and each packet comprising CAI; 

means for providing an application identifier (AID) in the at least one packet of the 
communication, the AID identifying the format of the CA L wherein the AID is located in the 
optional field of Network Layer 3 : 

means for extracting in accordance with the AID the CAI from the at least one packet for 
reporting; 

means for determining whether the extracted CAI is a new instance of the CAI; 

means for reporting to an LEA a first message in response to a determination that the 
extracted CAI is the new instance of the CAI; 

means for determining whether a predetermined amount of time has elapsed between 
packets of the at least one packet of the communication, the packets being identified by the CAI; 
and 

means for reporting to an LEA a second message in response to a determination that the 
given amount of time has elapsed, wherein the second message represents a timeout indication. 

24. (Cancelled) 

25. (Original) The apparatus of Claim 23, wherein the apparatus further comprises: 
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means for determining whether a given number of packets of the at least one packet of 
the communication has been intercepted, the packets being identified by the CAI; and 

means for reporting an intermediate CAI message in response to a determination that the 
given number of packets of the at least one packet of the communication has been intercepted. 

26. (Original) The apparatus of Claim 23, wherein the apparatus further comprises: 
means providing an AID-tag in the at least one packet of the communication, the AID-tag 

indicating the presence of the AID. 

27. (Original) The apparatus of Claim 23, wherein the apparatus further comprises: 
means for providing an AID-tag in the at least one packet of the communication, wherein 

the AID-tag indicates the presence of the AID, and wherein the AID-tag is located in the 
protocol field of the Network Layer 3. 

28. (Currently Amended) An apparatus for consolidating at least one packet of a 
communication between a subject and an associate, the apparatus comprising: 

means for receiving at least one packet of the communication, each packet comprising 
communication associated information (CAI); 

providing an application identifier TAID) in the at least one packet of the communication, 
the AID identifying the format of the CAL wherein the AID is located in the optional field of 
Network Layer 3: 

extracting in accordance with the AID the CAI from the at least one packet for reporting: 

means for determining whether a packet is a new instance of CAI; 

means for reporting to an LEA the CAI in response to a determination that the packet is 
the new instance of CAI; 

means for determining whether a predetermined amount of time has elapsed between 
packets of the at least one packet; 

means for reporting a timeout indication to an LEA in response to a determination that 
the predetermined amount of time has elapsed; and 
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means for reporting to an LEA the CAI periodically in response to a determination that 
the packet is a subsequent packet. 

29-30. (Cancelled) 

3 1 . (New) The apparatus of Claim 28, wherein the apparatus further comprises: 
means for determining whether a given number of packets of the at least one packet of 

the communication has been intercepted, the packets being identified by the CAI; and 

means for reporting an intermediate CAI message in response to a determination that the 
given number of packets of the at least one packet of the communication has been intercepted. 

32. (New) The apparatus of Claim 28, wherein the apparatus further comprises: 
means providing an AID-tag in the at least one packet of the communication, the AID-tag 

indicating the presence of the AID. 

33. (New) The apparatus of Claim 28, wherein the apparatus further comprises: 
means for providing an AID-tag in the at least one packet of the communication, wherein 

the AID-tag indicates the presence of the AID, and wherein the AID-tag is located in the 
protocol field of the Network Layer 3. 
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